The Infrastructure Mess Causing Countless Internet Outages

You may not have heard of the Border Gateway Protocol, but you definitely know when it goes wrong...

Hackers Used Two Firefox Zero Days to Hit a Crypto Exchange

A ransomware haul, a border security leak, and more of the week's top security news...

Data Breach Disclosed by Online Invitation Firm Evite

Online invitation and stationary company Evite has notified customers of a data breach that stemmed from an “inactive data storage file” associated with user accounts. The company over the weekend said that during April 2019, it became aware of a “security incident involving potential unauthorize...

Border Patrol data breach: Footages of tourists entering/exiting the US compromised

By Waqas The data breach took place after a database used by Border Patrol was hit by a "malicious cyber-attack." The officials from US Customs and Border Protection CBP have revealed that one of their subcontractors have been targeted with a “malicious” cyber attack due to which the pictures of...

Hackers Stole a Border Agency Database of Traveler Photos

In compromising a Customs and Border Protection subcontractor, hackers make off with photos of travelers and license plates...

The vulnerability of the Quagga software’s BGP protocol implementation, related to the repeated release of memory, allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the Quagga software’s BGP protocol implementation lies in the repeated release of memory during the processing of certain types of update messages. Exploiting this vulnerability allows a remote attacker to cause service failures or execute arbitrary code...

The vulnerability of the BGP component implementation in the Junos OS operating system allows a attacker to cause a service failure.

The vulnerability of the BGP component implementation in the Junos OS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2019-0028

On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a BGP session restart on a remote peer that has the graceful restart mechanism enabled may cause the local routing protocol daemon RPD process to crash and restart. By simulating a...

Former Mozilla CTO Harassed at the US Border

This is a pretty awful story of how Andreas Gal, former Mozilla CTO and US citizen, was detained and threatened at the US border. CBP agents demanded that he unlock his phone and computer. Know your rights when you enter the US. The EFF publishes a handy guide. And if you want to encrypt your...

A 'Smart Wall' Could Spark a New Kind of Border Crisis

A technological barrier might be preferable to a physical one, but it raises civil liberties concerns that are largely absent from the debate...

Trump's Wall Won't Solve a National Emergency. It Is One

President Trump has signaled that in addition to signing a congressional spending bill, he will declare a national emergency to fund his misbegotten border wall...

How the Feds Failed to Track Thousands of Separated Children

Ad hoc systems and haphazard databases made the Trump administration’s cruel border separation policies somehow even worse...

CVE-2019-0012

A Denial of Service DoS vulnerability in BGP in Juniper Networks Junos OS configured as a VPLS PE allows an attacker to craft a specific BGP message to cause the routing protocol daemon rpd process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended...

Microsoft Calls For Facial Recognition Tech Regulation

As facial recognition continues to gain traction in public use cases, Microsoft on Thursday called for regulation of the technology, citing heightened concerns around privacy and consent. Over the past year, facial recognition technology has started to pop up in various government-related...

Cisco IOS XR Software BGP Implementation Denial of Service Vulnerability

Cisco IOS XR Software is the United States Cisco Cisco company's IOS software series including IOS T, IOS S and IOS XR in a fully modular, distributed network operating system. An input validation vulnerability exists in the Border Gateway Protocol BGP feature implementation in Cisco IOS XR...

CVE-2018-15428

A vulnerability in the implementation of Border Gateway Protocol BGP functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to incorrect processing of certain BGP update messages. An attacker coul...

CVE-2018-15428 Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability

A vulnerability in the implementation of Border Gateway Protocol BGP functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to incorrect processing of certain BGP update messages. An attacker coul...

openSUSE Security Update : libreoffice (openSUSE-2018-942)

This update for libreoffice to 6.0.5.2 fixes the following issues : Security issues fixed : - CVE-2018-10583: An information disclosure vulnerability occurs during automatic processing and initiating an SMB connection embedded in a malicious file, as demonstrated by...

1Password's Travel Mode

The 1Password password manager has just introduced "travel mode," which allows you to delete your stored passwords when you're in other countries or crossing borders: Your vaults aren't just hidden; they're completely removed from your devices as long as Travel Mode is on. That includes every ite...

DEBIAN-CVE-2018-14342

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop. This was addressed in epan/dissectors/packet-bgp.c by validating Path Attribute lengths...